EUVD-2025-27991

Malicious code in bioql PyPI...

CVE-2025-41648

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI...

Node-RED Server Arbitrary Command Execution

The vulnerability of the Node-RED visual programming tool on the Pilz IndustrialPI industrial computer server is related to the absence of default authentication settings. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-41648

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI...

CVE-2025-41648 Pilz: Authentication Bypass in IndustrialPI Webstatus

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI...

CVE-2025-41648 Pilz: Authentication Bypass in IndustrialPI Webstatus

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI...

CVE-2025-41648

CVE-2025-41648 affects Pilz IndustrialPI Webstatus. An unauthenticated remote attacker can bypass the login to the IndustrialPI web application, allowing access to and modification of all available settings. The available connected docs consistently describe this as an authentication bypass leadi...

Pilz IndustrialPI Access Control Vulnerability

Pilz IndustrialPI is a gateway for the Industrial Internet of Things from Pilz Individual Developers in Germany. An access control error vulnerability exists in Pilz IndustrialPI that stems from the default unconfigured NodeRED server authentication leading to command execution...

PT-2025-27508 · Unknown · Industrialpi

Name of the Vulnerable Software and Affected Versions: IndustrialPI affected versions not specified Description: An unauthenticated remote attacker can bypass the login to the web application of the affected devices, making it possible to access and change all available settings of the...

CVE-2025-41648: Incorrect Type Conversion or Cast

An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI...

Pilz IndustrialPI code-related vulnerabilities

Pilz IndustrialPI is a gateway for the Industrial Internet of Things from Pilz Individual Developers in Germany. A code issue vulnerability exists in Pilz IndustrialPI that stems from an unauthenticated login bypass resulting in a setting change...